Lucene search
GoogleOSV:CVE-2022-25327HistoryFeb 25, 2022 - 11:15 a.m.
CVE-2022-25327
2022-02-2511:15:08
Google
osv.dev
9
pam module
fscrypt
denial of service
vulnerability
upgrade
software
EPSS
0
Percentile
5.1%
The PAM module for fscrypt doesn’t adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above
References
Related
osv
osv
Denial of service via insufficient metadata validation
2022-03-01 21:05:01
User login denial of service in github.com/google/fscrypt
2022-02-26 00:00:44
User login denial of service in github.com/google/fscrypt
2024-08-21 14:30:29
debiancve
debiancve
CVE-2022-25327
2022-02-25 11:15:08
prion
prion
Code injection
2022-02-25 11:15:00
github
github
User login denial of service in github.com/google/fscrypt
2022-02-26 00:00:44
Denial of service via insufficient metadata validation
2022-03-01 21:05:01
veracode
veracode
Denial Of Service (DoS)
2022-02-28 09:12:53
ubuntucve
ubuntucve
CVE-2022-25327
2022-02-25 00:00:00
cvelist
cvelist
CVE-2022-25327 Local Denial of Service in fscrypt PAM module
2022-02-25 11:00:14
nvd
nvd
CVE-2022-25327
2022-02-25 11:15:08
cve
cve
CVE-2022-25327
2022-02-25 11:15:08